Hi,
I tried as you suggested. Created an entry in CORS using same values as in your screenshot. Re-authenticated and then tried to execute an HTTP GET using the new Token.. Unfortunately I'm still getting the same error.
One thing I noticed though is that in the CORS settings, everytime I select the CORS entry that I created and click Update, the List Box goes right back to "--Select CORS Entry--" and not the "*". Not sure if this is the standard behavior.